MidnightBSD

Advisories for elfatek

CVE-2024-12136

Missing Critical Step in Authentication vulnerability in Elfatek Elektronics ANKA JPD-00028 allows Authentication Bypass.This issue affects ANKA JPD-00028: before V.01.01.

CVSS 3.x

Source Score Severity Vector Exploitability Impact
iletisim@usom.gov.tr 6.9 MEDIUM CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H 0.3 6.0
nvd@nist.gov 7.8 HIGH CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 1.8 5.9

Products Affected

Vendor Product Version
elfatek anka_jpd00028_firmware -